Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft
File:                     090356FA0F721D9A2449A75F672A23DBF91DA79D.mft (raw, json)
Hash identifier:          wNcHFmJPcRy/HIBgeKBDxTJISUVk/zk4qi9iszhglgU=
Subject key identifier:   9E:AE:6E:42:D8:52:CD:BC:C1:99:63:D9:DC:27:E1:A1:2F:30:9F:F2
Authority key identifier: 09:03:56:FA:0F:72:1D:9A:24:49:A7:5F:67:2A:23:DB:F9:1D:A7:9D
Certificate issuer:       /CN=090356FA0F721D9A2449A75F672A23DBF91DA79D
Certificate serial:       77E2665D421C4AA18525421A2A9415F58DD773CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft
Manifest number:          0178
Signing time:             Tue 13 Oct 2026 18:50:23 +0000
Manifest this update:     Tue 13 Oct 2026 18:45:23 +0000
Manifest next update:     Wed 14 Oct 2026 19:21:23 +0000
Files and hashes:         1: 3230312e3232322e32342e302f32322d3232203d3e203631383233.roa (hash: 98gQk7tfGUs9pRvDwbcZtGSi6xreh7ZTsgIuv3pcGUk=)
                          2: 3230312e3232322e32342e302f32342d3234203d3e203631383233.roa (hash: MFj2Y8vN35UbFz/c4cSx/WpIcJn650ZPq1l2J6Fv7LU=)
                          3: 3230312e3232322e32352e302f32342d3234203d3e203631383233.roa (hash: UH+oFoq2yann0hghXVWtajLFKBb7Ef5WZDDqQ2Pw1dY=)
                          4: 323830343a313964633a3a2f33322d3332203d3e203631383233.roa (hash: cyI9TnrAXG4EH1ifG0QJQ9pHFHDG0QDBoC7kzrFfLWo=)
                          5: 3230312e3232322e32372e302f32342d3234203d3e203631383233.roa (hash: 8yd6vMry85HJiPM7/L+kf1JkW05+VgR6cDI6fBW4j5Y=)
                          6: 090356FA0F721D9A2449A75F672A23DBF91DA79D.crl (hash: mzD7e1EOBNCS8HqdvjMzRIafnODeRtDcXnaV7F3IOYo=)
                          7: 3230312e3232322e32362e302f32342d3234203d3e203631383233.roa (hash: IuE9qEXXl1d2+xJJVVo1437qrmnar46Ql035+T2MD9w=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.crl
                          rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 19:21:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e2:66:5d:42:1c:4a:a1:85:25:42:1a:2a:94:15:f5:8d:d7:73:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090356FA0F721D9A2449A75F672A23DBF91DA79D
        Validity
            Not Before: Oct 13 18:45:23 2026 GMT
            Not After : Oct 14 19:21:23 2026 GMT
        Subject: CN=9EAE6E42D852CDBCC19963D9DC27E1A12F309FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:af:59:df:09:f9:59:dd:2a:3f:fa:fe:8e:
                    b5:c3:d2:21:54:74:71:24:87:97:e5:51:d6:50:71:
                    b8:95:dc:47:1f:57:bd:93:60:11:8b:70:3a:a8:5c:
                    9b:d7:91:d0:c1:af:03:7c:ae:91:9b:5e:51:1a:5a:
                    65:63:78:9b:f2:d4:98:a5:99:44:37:cf:a0:f4:34:
                    ea:d2:99:ab:9f:d6:f4:ed:c1:1a:77:c7:5b:68:23:
                    31:80:fc:5e:94:66:18:9f:43:2a:cb:06:d2:39:2b:
                    bd:b0:e5:26:84:a2:fa:1e:06:06:db:9f:62:6f:eb:
                    e8:87:43:3e:1d:2c:ff:75:2b:fb:c7:98:53:ab:5f:
                    3e:2e:20:25:a5:de:85:f9:b3:cd:c9:c1:78:c9:37:
                    65:6f:bc:6d:65:ab:9b:1a:90:09:e3:fd:18:28:00:
                    aa:8a:e3:29:b1:62:16:e2:73:81:62:5d:cb:9f:00:
                    4b:7c:10:a8:1a:e5:ff:64:c6:b4:a6:ee:c6:5a:af:
                    39:a3:e8:99:62:f2:35:2e:fb:c4:df:d6:2d:d1:3b:
                    ec:48:34:0c:8b:2e:56:bd:27:95:69:2b:ed:a4:a8:
                    76:18:1b:8d:0b:f3:20:96:e0:34:a2:85:f0:4b:a9:
                    19:2e:49:0b:98:8f:b3:f0:f4:47:07:79:e7:54:78:
                    7e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AE:6E:42:D8:52:CD:BC:C1:99:63:D9:DC:27:E1:A1:2F:30:9F:F2
            X509v3 Authority Key Identifier:
                keyid:09:03:56:FA:0F:72:1D:9A:24:49:A7:5F:67:2A:23:DB:F9:1D:A7:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090356FA0F721D9A2449A75F672A23DBF91DA79D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/0/090356FA0F721D9A2449A75F672A23DBF91DA79D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c0:81:ee:1f:4a:6f:fc:11:50:59:6e:3e:36:a2:24:34:9c:
         7a:4e:ba:9b:b8:1f:9c:f0:09:7e:38:5c:46:e7:28:26:89:f2:
         d6:03:dd:a5:ed:ab:d8:a7:38:7d:76:e5:bf:b6:29:e0:12:c0:
         e8:3d:8a:56:aa:37:f0:19:35:b9:33:11:64:ff:3b:1c:90:6e:
         fd:88:3c:a3:d5:e0:dd:e5:b0:5f:3f:30:c5:57:80:47:8c:d9:
         72:7f:4e:28:ef:f2:6e:b4:22:d5:6c:d9:88:b3:f3:da:4e:ab:
         b0:c8:5a:e2:6e:82:9b:7f:52:2a:3d:08:e9:0e:ab:d5:4a:84:
         8a:24:a8:bc:24:02:77:c7:7b:f6:5b:56:ac:15:7d:fc:64:31:
         fe:b5:f2:85:8a:32:7f:ee:0a:93:dc:1d:af:e0:4c:ef:d0:a7:
         bb:7d:0e:2a:83:62:30:60:c2:39:ea:25:4a:f1:ca:71:27:d6:
         b4:70:4f:53:a8:9e:4f:a6:02:5b:18:67:ba:f3:cf:b6:c6:65:
         4f:a4:52:01:d8:cb:d9:f2:1b:23:d3:38:c8:16:de:da:76:6a:
         a1:dc:b7:f8:e8:cd:6c:dc:66:e1:28:4b:ef:b0:d8:dc:bf:39:
         ed:28:23:88:d7:36:d0:a9:eb:d0:08:39:85:24:09:59:29:76:
         ee:8a:ec:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUd+JmXUIcSqGFJUIaKpQV9Y3Xc8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDkwMzU2RkEwRjcyMUQ5QTI0NDlBNzVGNjcyQTIzREJG
OTFEQTc5RDAeFw0yNjEwMTMxODQ1MjNaFw0yNjEwMTQxOTIxMjNaMDMxMTAvBgNV
BAMTKDlFQUU2RTQyRDg1MkNEQkNDMTk5NjNEOURDMjdFMUExMkYzMDlGRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIzK9Z3wn5Wd0qP/r+jrXD0iFU
dHEkh5flUdZQcbiV3EcfV72TYBGLcDqoXJvXkdDBrwN8rpGbXlEaWmVjeJvy1Jil
mUQ3z6D0NOrSmauf1vTtwRp3x1toIzGA/F6UZhifQyrLBtI5K72w5SaEovoeBgbb
n2Jv6+iHQz4dLP91K/vHmFOrXz4uICWl3oX5s83JwXjJN2VvvG1lq5sakAnj/Rgo
AKqK4ymxYhbic4FiXcufAEt8EKga5f9kxrSm7sZarzmj6Jli8jUu+8Tf1i3RO+xI
NAyLLla9J5VpK+2kqHYYG40L8yCW4DSihfBLqRkuSQuYj7Pw9EcHeedUeH6nAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnq5uQthSzbzBmWPZ3CfhoS8wn/IwHwYDVR0j
BBgwFoAUCQNW+g9yHZokSadfZyoj2/kdp50wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEM0M1BWaWV6bjN2V1JkUDE2a0Z6UkwydGN6cUhKMVNQUkg4UVBXTmNY
alovMC8wOTAzNTZGQTBGNzIxRDlBMjQ0OUE3NUY2NzJBMjNEQkY5MURBNzlELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5MDM1NkZBMEY3MjFEOUEy
NDQ5QTc1RjY3MkEyM0RCRjkxREE3OUQuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
SEM0M1BWaWV6bjN2V1JkUDE2a0Z6UkwydGN6cUhKMVNQUkg4UVBXTmNYalovMC8w
OTAzNTZGQTBGNzIxRDlBMjQ0OUE3NUY2NzJBMjNEQkY5MURBNzlELm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX8CB7h9Kb/wRUFluPjaiJDScek66m7gfnPAJfjhcRucoJony1gPdpe2r2Kc4
fXblv7Yp4BLA6D2KVqo38Bk1uTMRZP87HJBu/Yg8o9Xg3eWwXz8wxVeAR4zZcn9O
KO/ybrQi1WzZiLPz2k6rsMha4m6Cm39SKj0I6Q6r1UqEiiSovCQCd8d79ltWrBV9
/GQx/rXyhYoyf+4Kk9wdr+BM79Cnu30OKoNiMGDCOeolSvHKcSfWtHBPU6ieT6YC
WxhnuvPPtsZlT6RSAdjL2fIbI9M4yBbe2nZqody3+OjNbNxm4ShL77DY3L857Sgj
iNc20Knr0Ag5hSQJWSl27ors0w==
-----END CERTIFICATE-----
Generated at Wed Oct 14 07:06:47 2026 by rpki-client